chore: 初始化仓库基线（AGENTS.md、git 规范、敏感文件排除）

2026-08-10 22:30:53 +08:00
commit 84abf4454c
358 changed files with 75993 additions and 0 deletions
@@ -0,0 +1,140 @@
+const http = require('http');
+const fs = require('fs');
+const path = require('path');
+const zlib = require('zlib');
+
+const DIST = '/home/pan/silk/web/dist';
+const PORT = 5174;
+
+const MIME = {
+  '.html': 'text/html; charset=utf-8',
+  '.js': 'application/javascript; charset=utf-8',
+  '.css': 'text/css; charset=utf-8',
+  '.json': 'application/json; charset=utf-8',
+  '.png': 'image/png',
+  '.svg': 'image/svg+xml',
+  '.ico': 'image/x-icon',
+  '.woff': 'font/woff',
+  '.woff2': 'font/woff2',
+};
+
+// 统一安全响应头（静态资源）
+const SECURITY_HEADERS = {
+  'X-Content-Type-Options': 'nosniff',
+  'X-Frame-Options': 'DENY',
+  'Referrer-Policy': 'no-referrer',
+  'Content-Security-Policy':
+    "default-src 'self'; img-src 'self' data: blob:; media-src 'self' blob:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'; connect-src 'self' ws: wss:; font-src 'self' data:; object-src 'none'; frame-ancestors 'none'",
+  'Strict-Transport-Security': 'max-age=31536000; includeSubDomains',
+};
+
+const server = http.createServer((req, res) => {
+  console.log(`${req.method} ${req.url}`);
+
+  // API proxy to Go backend
+  if (req.url.startsWith('/api')) {
+    const options = {
+      hostname: '127.0.0.1',
+      port: 3000,
+      path: req.url,
+      method: req.method,
+      headers: { ...req.headers, host: 'localhost:3000' },
+    };
+    const proxy = http.request(options, (proxyRes) => {
+      res.writeHead(proxyRes.statusCode, proxyRes.headers);
+      proxyRes.pipe(res);
+    });
+    proxy.on('error', (e) => {
+      console.error('API proxy error:', e.message);
+      res.writeHead(502, { 'Content-Type': 'application/json' });
+      res.end(JSON.stringify({ error: 'Bad Gateway', detail: e.message }));
+    });
+    req.pipe(proxy);
+    return;
+  }
+
+  // FLV/fMP4/HLS stream proxy to ZLMediaKit (avoids CORS/network issues)
+  const streamPath = req.url.split('?')[0];
+  if (streamPath.match(/^\/rtp\//) || streamPath.match(/\.(flv|mp4|m3u8|ts)$/)) {
+    const proxy = http.request({
+      hostname: '127.0.0.1',
+      port: 8081,
+      path: req.url,
+      method: req.method,
+      headers: { ...req.headers, host: 'localhost:8081' },
+    }, (proxyRes) => {
+      res.writeHead(proxyRes.statusCode, proxyRes.headers);
+      proxyRes.pipe(res);
+    });
+    proxy.on('error', (e) => {
+      console.error('Stream proxy error:', e.message);
+      res.writeHead(502, { 'Content-Type': 'text/plain' });
+      res.end('Stream proxy error: ' + e.message);
+    });
+    req.pipe(proxy);
+    return;
+  }
+
+  // Static file serving with gzip
+  let urlPath = req.url.split('?')[0];
+  let filePath = path.join(DIST, urlPath === '/' ? 'index.html' : urlPath);
+
+  if (!fs.existsSync(filePath) || fs.statSync(filePath).isDirectory()) {
+    filePath = path.join(DIST, 'index.html');
+  }
+
+  fs.readFile(filePath, (err, data) => {
+    if (err) {
+      res.writeHead(404);
+      res.end('Not Found');
+      return;
+    }
+
+    const ext = path.extname(filePath);
+    const contentType = MIME[ext] || 'application/octet-stream';
+    const acceptEncoding = req.headers['accept-encoding'] || '';
+    const useGzip = acceptEncoding.includes('gzip') && data.length > 1024;
+    // index.html 不缓存，带 hash 的静态资源缓存 7 天
+    const cacheControl = ext === '.html'
+      ? 'no-cache, no-store, must-revalidate'
+      : 'public, max-age=604800';
+
+    if (useGzip) {
+      zlib.gzip(data, (err, compressed) => {
+        if (err) {
+          res.writeHead(500);
+          res.end('Compression Error');
+          return;
+        }
+        res.writeHead(200, {
+          'Content-Type': contentType,
+          'Content-Encoding': 'gzip',
+          'Content-Length': compressed.length,
+          'Cache-Control': cacheControl,
+          ...SECURITY_HEADERS,
+        });
+        res.end(compressed);
+      });
+    } else {
+      res.writeHead(200, {
+        'Content-Type': contentType,
+        'Content-Length': data.length,
+        'Cache-Control': cacheControl,
+        ...SECURITY_HEADERS,
+      });
+      res.end(data);
+    }
+  });
+});
+
+server.on('error', (e) => {
+  console.error('Server error:', e);
+});
+
+process.on('uncaughtException', (e) => {
+  console.error('Uncaught:', e);
+});
+
+server.listen(PORT, '0.0.0.0', () => {
+  console.log(`Server running on http://0.0.0.0:${PORT} (gzip enabled)`);
+});